Oct 2026: Microsoft Office Excel Remote Code Execution Vulnerability
CVE-2026-97011 Published on October 13, 2026
Microsoft Office Excel Remote Code Execution Vulnerability
Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
Weakness Types
Use of Uninitialized Resource
The software uses or accesses a resource that has not been initialized. When a resource has not been properly initialized, the software may behave unexpectedly. This may lead to a crash or invalid memory access, but the consequences vary depending on the type of resource and how it is used within the software.
Release of Invalid Pointer or Reference
The application attempts to return a memory resource to the system, but calls the wrong release function or calls the appropriate release function incorrectly.
Products Associated with CVE-2026-97011
Want to know whenever a new CVE is published for Microsoft products? stack.watch will email you.
Affected Versions
Microsoft 365 Apps for Enterprise:- Version 16.0.1 and below https://aka.ms/OfficeSecurityReleases is affected.
- Version 1.0.0 and below 16.114.26101123 is affected.
- Version 16.0.1 and below 16.0.14334.20974 is affected.
- Version 16.0.0 and below 16.0.17932.21056 is affected.
- Version 16.0.1 and below 16.114.26101123 is affected.
- Version 16.0.0 and below 16.114.26101123 is affected.